Write another we managed to get a remote child from our talented computer.
Let's see if we can do the same and use the same exploit with medium security.
So I'm going to cancel this and I'm going to go to the security level.
And I'm going to said that to me you know my dad and we're going to go back to our file inclusion vulnerability.
I'm going to listen on the same port exactly like we did in the last video.
I'm going to use the exact same way to get by for sure.
So we're just going to put the DXi file that contains the code for the first connection.
So that's our file and we run it.
And as you can see we get nothing here.
And we get an error message.
So what's happening here is it could be that the exploit is patched or maybe they're used in some sort
of filtering.
You can try and play around with it.
Now obviously they can't really filter based on your name because you know you can have any name in
here.
They can't really filter on that because again you can have dots and file names like the files that
they had originally is the original file is called include those BHB So again they can't really have
a filter on the dots.
So the things that would should raise flags for you is the forward slash which is highly unlikely because
again for stashes are used a lot.
TTP because usually you wouldn't have TTP your out after the first HDTV.
So I'm going to use it.
I'm just going to try and put in a set of normal things I'm going to put capital-T is so instead of
page small these malty I have TTP.
But the truth is there are capital.
And if I hit Enter now you'll see that I got my connection right here.
And again I have full access to the server where I can do whatever I want.
Now obviously this is happening because the way that they're secure and this is not right and we'll
talk about security in any future lecture.
So I just want to show you the code now though.
Just a quick look I usually don't show the code.
And as you can see here they are actually looking for hey she TPSAC CPS and they're replacing that with
nothing.
So that's why when we use capital-T is we were able to bypass this filter.
So always using filters is never a good idea because filters can always be pyper bypass.